Overview

overview

10

Static

static

10

2026-09-30...er.exe

windows10-2004-x64

3

2026-09-30...er.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-30_3e02d81458c2349452c9530aa5612208_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
  • Size 3.6MB
  • Sample261001-s6wghawalg
  • SHA256 d970ce748cbc29379dc8ffb6870f2160c5a6727031b5f0cae52a6bfd5552c010
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
meshagentworkbackdoordiscoveryrattrojan

Malware Config

Extracted

Family

  • meshagent

Version

  • 2

Botnet

  • Work

C2

  • http://propgood.com:443/agent.ashx

Attributes
  • mesh_id

    0x65FA33A943CD3881FC279DF0512331F6B1808AB673A71A51DB44891B5509662BBDF9D8D727A3B6AAFA29FF37A38A7CC1

  • server_id

    95CD6D86091ABDA00D31E55991AFCBB6E22FD71CAD781B0DF6E3590A9DBDE755F65D762E6FE70B25677C7AB2946B01C2

  • wss

    wss://propgood.com:443/agent.ashx

Targets

    • Target
      2026-09-30_3e02d81458c2349452c9530aa5612208_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver
    • Size 3.6MB
    • SHA256 d970ce748cbc29379dc8ffb6870f2160c5a6727031b5f0cae52a6bfd5552c010
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks